Canonical: https://ownershiptrace.com/privacy # Privacy Policy Last updated 30 September 2026. This policy explains what personal data OwnershipTrace collects, why, how long it is kept, who receives it, and the rights you have. It is written to meet the EU General Data Protection Regulation (GDPR); the same practices apply to everyone. OwnershipTrace is operated by Better Future Company, Doktor Willesvej 3, 2650 Hvidovre, Denmark (registration number 30877381). Contact: [info@ownershiptrace.com], or the feedback button in the bottom-right corner of the site. The operator is the data controller for the processing described here. ## 1. Visiting the site Our web server keeps standard access logs, including IP addresses, for security and abuse prevention. IP addresses are also held briefly in memory to rate-limit login, registration, and feedback requests. Logs are rotated and deleted on a short schedule. Legal basis: legitimate interest in operating and securing the site. ### Google Analytics We use Google Analytics, provided by Google Ireland Limited, to understand which pages are visited, how visitors arrive, and roughly how many there are. The first time you visit, a banner asks whether you allow analytics cookies. - If you accept, Google Analytics sets cookies that recognise your browser on later visits and records the pages you view, the referring site, and general device, browser, and approximate location information. - If you reject, or have not chosen yet, no analytics cookies are set. Your browser still sends Google cookieless signals about page views, without an identifier that links them to you or to each other, which Google uses to estimate total traffic. Google Analytics does not store IP addresses. We do not send it account details, email addresses, or payment information, and we have turned off advertising features. Your choice is saved in your browser for 12 months, and you can change it at any time with the Cookie settings link at the bottom of every page. Withdrawing consent removes the analytics cookies. Legal basis: your consent. Retention: Google keeps analytics data for the retention period set in our account, at most 14 months. ## 2. Accounts When you create an account we store your email address, a securely hashed password (we never store the password itself), the time your email was verified, and your login sessions. Verification and password-reset links are sent by our email provider, Resend. Session data is held in a cookie that is strictly necessary to keep you signed in. Legal basis: performance of a contract (providing the account you asked for). Retention: for as long as the account exists. Deleting your account removes these records immediately. ## 3. Premium subscriptions and payments Subscriptions are sold by Paddle.com Market Limited (Paddle) as merchant of record. Paddle collects your payment details, billing address, and tax information directly in its checkout and is an independent controller of that data under the [Paddle privacy policy](https://www.paddle.com/legal/privacy). We never receive your card number. From Paddle we receive and store your customer and subscription identifiers, subscription status and billing dates, and the notifications Paddle sends about them, so we can grant and remove Premium access and show your subscription on the Account page. We share your email address and account identifier with Paddle to open the checkout and match payments to your account. Legal basis: performance of a contract, and legal obligations relating to bookkeeping. Retention: subscription and payment records are kept for five years after the last payment to meet accounting requirements, even if the account is deleted; they are then removed. ## 4. Feedback and contact The feedback form stores your message and, only if you provide it, your email address, so we can reply. Emails you send us are kept while we handle them. Legal basis: legitimate interest in answering you and improving the site. Retention: up to two years. ## 5. Recipients - Paddle.com Market Limited (United Kingdom): payment processing, tax, receipts, refunds. - Resend (United States): delivery of account and billing emails. - Google Ireland Limited (Ireland), with Google LLC (United States): website analytics, only as described in section 1. - Our hosting provider: servers and backups on which the site runs. We do not sell personal data and do not share it for advertising. Transfers outside the European Economic Area rely on the European Commission's standard contractual clauses or an adequacy decision, as provided by each recipient. ## 6. Cookies The site sets one cookie when you sign in, to keep your session, and one for the site administrator. Both are strictly necessary and neither is used for tracking. Your cookie choice is stored in your browser's local storage so the banner is not shown on every visit. Only if you accept analytics cookies, Google Analytics sets _ga and _ga_\, which distinguish visitors and sessions and expire after two years. The Paddle checkout, when opened, may set its own cookies under the Paddle privacy policy. ## 7. Your rights You can ask for access to your personal data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. You can delete your account yourself from the Account page. For anything else, email [info@ownershiptrace.com]. You also have the right to complain to a supervisory authority; in Denmark that is Datatilsynet. ## 8. Children The site is not directed at children, and accounts are limited to people aged 18 or over. ## 9. Changes We will post changes to this policy here and update the date at the top. Material changes affecting account holders will also be sent by email.